fix(deps): 修复 Dependabot 安全漏洞

- serialize-javascript: 6.0.2 → ^7.0.3 (RCE 漏洞, GHSA #39)
- minimatch: ^10.2.2 → ^10.2.3 (ReDoS 漏洞, GHSA-7r86/GHSA-23c5)
- rollup: 2.79.2 → ^2.80.0 (路径遍历漏洞, GHSA-mw96)

通过 package.json overrides 强制版本提升,npm audit 0 漏洞
This commit is contained in:
Abner
2026-03-01 15:42:58 +08:00
parent 1e4f263dfe
commit 7869a729c9
2 changed files with 10 additions and 17 deletions

21
package-lock.json generated
View File

@@ -12650,16 +12650,6 @@
"url": "https://github.com/sponsors/ljharb"
}
},
"node_modules/randombytes": {
"version": "2.1.0",
"resolved": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz",
"integrity": "sha512-vYl3iOX+4CKUWuxGi9Ukhie6fsqXqS9FE2Zaic4tNFD2N2QQaXOMFbuKK4QmDHC0JO6B1Zp41J0LpT0oR68amQ==",
"dev": true,
"license": "MIT",
"dependencies": {
"safe-buffer": "^5.1.0"
}
},
"node_modules/range-parser": {
"version": "1.2.1",
"resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
@@ -13127,13 +13117,13 @@
"license": "MIT"
},
"node_modules/serialize-javascript": {
"version": "6.0.2",
"resolved": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.2.tgz",
"integrity": "sha512-Saa1xPByTTq2gdeFZYLLo+RFE35NHZkAbqZeWNd3BpzppeVisAqpDjcp8dyf6uIvEqJRd46jemmyA4iFIeVk8g==",
"version": "7.0.3",
"resolved": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-7.0.3.tgz",
"integrity": "sha512-h+cZ/XXarqDgCjo+YSyQU/ulDEESGGf8AMK9pPNmhNSl/FzPl6L8pMp1leca5z6NuG6tvV/auC8/43tmovowww==",
"dev": true,
"license": "BSD-3-Clause",
"dependencies": {
"randombytes": "^2.1.0"
"engines": {
"node": ">=20.0.0"
}
},
"node_modules/serve-static": {
@@ -14628,6 +14618,7 @@
"integrity": "sha512-pIDJHIEI9LR0yxHXQ+Qh95k2EvXpWzZ5l+d+jIo+RdSm9MiHfzazIxwwni/p7+x4eJZuvG1AJwgC4TNQ7NRgsg==",
"dev": true,
"license": "MIT",
"peer": true,
"dependencies": {
"@discoveryjs/json-ext": "^0.5.0",
"@webpack-cli/configtest": "^2.1.1",

View File

@@ -91,7 +91,9 @@
},
"homepage": "https://esim.cosr.eu.org",
"overrides": {
"minimatch": "^10.2.2",
"glob": "^11.1.0"
"minimatch": "^10.2.3",
"glob": "^11.1.0",
"serialize-javascript": "^7.0.3",
"rollup": "^2.80.0"
}
}